Transition to rules syntax for DAST vendored template

As a part of #36539 (closed), we need to transition to rules: syntax as only/except is considered deprecated

https://gitlab.com/gitlab-org/gitlab/blob/master/lib/gitlab/ci/templates/Security/DAST.gitlab-ci.yml